CVE-2022-22138

CVE-2022-22138 affects the npm package fast-string-search . The vulnerability causes a Denial of Service when computations are incorrect for non-string inputs, potentially causing the V8 engine to read from non-permitted locations and leading to a segmentation fault. Connected sources describe Do...

CVE-2022-25872

The CVE-2022-25872 entry concerns the npm package fast-string-search. The vulnerability is an out-of-bounds read caused by incorrect memory freeing and length calculation when the source input is not a string, allowing access to previously allocated memory. Affected component is the fast-string-s...